Currently, to manage data on behalf of the user, delegated private keys need to be stored in the application's database.
To avoid this, the delegated filesystem can be extended to include application namespaces. In this namespace, encrypted private keys can be stored, which can only be decrypted by the application key. This way, nano-applications will have less dependency on cloud platforms.